Cyber Test Engineer with DoD Secret / citizen in Scott Air Force Base, Illinois at Veterans Enterprise Technology Solutions Inc

VETS, Inc., is looking to add a Cyber Test Engineer/Automation engineer to our growing team. This role will support ISSO/ISSE security compliance, testing, and continuous‑monitoring automation for an IL5 multi‑cloud environment.

• Clearance: Interim Secret (minimum)
• Certification Requirements: DoD 8140 – Foundational Intermediate – 671 System Testing & Evaluation Specialist (Tentative) CEH (Certified Ethical Hacker) CFR (CyberSec First Responder) Cloud+ GSEC PenTest+ Security+ SSCP
• Experience: 4+ years in security automation, compliance testing, or DevSecOps

STIG / SCAP Automation

• Experience with ACAS (Tenable SC) and Nessus automation for continuous DISA SCAP benchmark scanning
• Knowledge of SCAP Compliance Checker (SCC) for XCCDF / ARF / CKL validation
• Automation of Trellix Policy Auditor STIG compliance scanning

Testing & Quality Tools

• Proficiency with Tricentis test automation (SAP + Mendix regression testing)
• Experience with SonarQube quality gates and CI/CD pipeline integration
• Familiarity with Fortify SAST and software bill of materials (SBOM) generation (CycloneDX / SPDX)

CI/CD Pipeline

• GitLab CI/CD pipeline development and security‑gate implementation
• IaC testing (Terraform / CloudFormation validation)
• Integration of security‑scanning results into AWS Security Hub

SIEM / SOAR

• Splunk ES query development and alert automation
• Splunk SOAR playbook development (30–90 second automated response targets)
• Experience with ESCU (Enterprise Security Content Updates) detection rules

Compliance Automation

• eMASS API integration for automated evidence upload
• AWS Config conformance‑pack development for continuous compliance
• AWS Audit Manager control automation
• CORA evidence‑pipeline automation

Preferred Skills

• Python, PowerShell, or Bash scripting
• AWS GovCloud experience (Lambda, EventBridge, Step Functions)
• Understanding of RMF continuous‑monitoring requirements
• Experience with SAFe Agile methodology and PI planning